Search: CVE-2024-1874

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.4	EPSS 32%	CVE-2024-1874PHP · Improper Encoding or Escaping of Output Critical9.4EPSS 32%2024-05-14CVE Database V5CVE-2024-1874 In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell. EPSS 32%Vulnerability PHP Group #cwe-116 #bit-php-2024-1874 #bitnami	CVE Database V5	2024-05-14

Page 1 of 1